Senior HyperAutomation Engineer - Wayfinder MDR

עיקרי התפקיד

• Design, develop, and maintain hyperautomation workflows that support alert triage, enrichment, investigation, and response.
• Convert SOC playbooks, investigation logic, and threat-hunting processes into automated, production-grade workflows.
• Proactively identify repetitive or high-volume SOC tasks and implement automation to improve efficiency and consistency.
• Build and maintain integrations with internal platforms and third-party security tools using APIs, webhooks, and event-driven mechanisms.
• Collaborate closely with Threat Service Engineers (TSEs) and SOC teams to fine-tune existing detections and automation logic.
• Improve and optimize MDR operational processes to ensure fast response times and effective threat mitigation.
• Own automation workflows end-to-end, including design, deployment, monitoring, troubleshooting, and continuous improvement.
• Create and maintain automation playbooks, templates, and best practices to support incident response at scale.
• Work closely with R&D and product teams to provide operational feedback and help shape future detection and response capabilities.
• What Skills and Knowledge Will You Bring?
• Ideal candidates will have:
• 5+ years of experience in Security Engineering, Automation Engineering, SOC Tooling, Backend Engineering, or similar technical roles.
• Strong experience with Python (required); experience with SQL is highly preferred.
• Experience building and operating automation workflows or backend services in production environments.
• Solid understanding of SOC operations, incident response workflows, and security alert lifecycles.
• Experience working with APIs, integrations, and distributed systems.
• Strong problem-solving skills with the ability to translate operational challenges into scalable engineering solutions.
• Professional and articulate, with strong written and verbal communication skills.
• Ability to manage multiple workstreams and prioritize effectively in a fast-paced environment.
• Experience working in MDR, SOC, Threat Hunting, or Incident Response environments.
• Familiarity with cloud platforms (AWS preferred).
• Experience with security telemetry, alerting pipelines, SIEM/XDR concepts, or internal SOC tooling.
• Experience building internal tools for operational or security teams.
• Why SentinelOne?
• AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.
• We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:
• Equity & Rewards
• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Time Off & Wellbeing
• Competitive leave benefits
• Gender-neutral parental leave
• Employee Assistant Program
• Workout sessions and a Wellness App
• Insurance & Financial Security
• Medical and insurance benefits
• Pension
• Employee Assistance Program (EAP)
• Work Perks & Flexibility
• Global home office allowance
• Mobile phone reimbursement
• SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
• SentinelOne participates in the E-Verify Program for all U.S. based roles.